ZCLI Basic Auth using secure settings

I can't seem to get basic auth working. I already tried what's described in this article https://developer.zendesk.com/documentation/apps/app-developer-guide/making-api-requests-from-a-zendesk-app/#using-basic-access-authentication 
 

We use a token:token format for our basic auth and I think the issue is a restriction on secure settings in the basic_auth.username object.

var apiCall = {
                URL: url
                headers: {
                    "Authorization": "Basic {{basic_auth.token}}"},
                basic_auth: {
                    "username": "{{setting.api_token}}",
                    "password": "{{setting.api_token}}"
                },
                type: 'GET',
                secure: true
            };

Can someone help point out my mistake here?