client: break apart KeysAPI from httpClient