[garretn]

I said addon's xml, not addon.xml.

You need to use the API key, you don't need to use the secret key at all. Make sure you replace it in both places it occurs, not just the first one.