In subprocess, since we get binary, need to coerce to text.
After going through tmp and etc, settle on /etc/confluent/ as the generally relevant directory when possible. Additionally, move apikey and ifidx logic into apiclient where possible