Move API keys to hermes.postinst, and centralise browser checking into