The Practical Dev's review of How to securely store API keys