okay so to anybody who's wondering... the API key is in plane text which (afaik)... is not how it's supposed to be
https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html#2-general-secrets-management
however this does make my job easier. If anybody else is looking, your cURL requests look something like this:
curl -H 'Authorization: whm {tblservers.username}:{tblservers.accesshash}' 'https://{tblservers.hostname}:{tblservers.port}/json-api/{action}?api.version=1'
Replace the action and the relevant fields from tblservers.
