Either a key id or username is required