Same issue for me - not sure why subaccount API keys are not working.
Using primary key is not ideal, but it gets the job done. Anyone found any alternative tools?