API credentials

Rotate secrets without widening the page header API.