Uses the API when a key is set (see rbox_token()) and reads the box's web
page otherwise. When the API fails (most often ResearchBox's hourly limit
for one box), the web page is read instead. The API answers alike for a box
that does not exist and one that is not public; the web page tells them
apart, so its answer is the one reported.