API key now encrypted on disk