params apiSecretKey cannot be null