title: Apple Application Loader altool issue when using api key
body: <p>I am currently trying to use ALTool to upload my application IPA to App Store Connect as part of a build script.
  These are the commands I am using:</p>
  <pre><code>xcrun altool --validate-app -f my-ipa-file.ipa -t ios --apiKey &quot;MYAPIKEY&quot; --apiIssuer &quot;MYISSUERID&quot;
  xcrun altool --upload-app -f my-ipa-file.ipa -t ios --apiKey &quot;MYAPIKEY&quot; --apiIssuer &quot;MYISSUERID&quot;
  </code></pre>
  <p>My private key (p8) is located at</p>
  <p>./private_keys/AuthKey_MYAPIKEY.p8</p>
  <p>According to the altool --help command the tool will look in the following directories (in order) for a p8 file named AuthKey_&lt;apikey&gt;.p8:</p>
  <pre><code> ./private_keys
   ~/private_keys
   ~/.private_keys
   ~/.appstoreconnect/private_keys
  </code></pre>
  <p>Considering the p8 file is in the first folder of that list, this should work.
  And for the --validate-app call, it does actually work. The calls to App Store Connect are made, the app validates and if there are any errors from App Store Connect they return as expected.</p>
  <p>However, for some reason the --upload-app command always returns with the same error:</p>
  <pre><code>2020-09-01 14:24:40.934 altool[28265:119010] * Error: Error uploading 'my-ipa-file.ipa'.
  2020-09-01 14:24:40.934 altool[28265:119010] * Error: code -18000 (Could not locate the private key file: AuthKey_MYAPIKEY.p8)
  </code></pre>
  <p>For some reason it seems --upload-app doesn't properly load the p8 file in ./private_keys/ while --validate-app does.</p>
  <p>Placing the p8 file in one of the other 3 folders (~/private_keys etc.) does work for both validate and upload as a temporary workaround. But I prefer to use ./private_keys due to how my build scripts injects files into the build process.</p>
  <p>Is this a bug in altool or is there something I'm missing?</p>