So can you write the code so that the api key stays safe in secure storage while still be accessible by the bot?