Secure API keys

/cc @josevalim 
Good points!