SecurityAPI keys and PAT tokens never appear in logs, console output, error messages, or source codeKeys are retrieved from KeePass, used immediately, and go out of scope never stored in memory longer than neededNo keys are ever passed as URL parameters headers onlyThe .adoboards/ folder and .env are gitignored by defaultKeePass databases are AES-256 encrypted even root can't read them without the master password