host-specific apikey