Instead use API secret, which is now exposed in the UI, and is preferred for things like `import`, `merge`.