The current example for using composer with the api key to grab the premium add-ons places the api key in the json file as part of the metabox repo url.
Is there support for using a custom request header in which to place the api key or http basic auth?