A safer way of handling API keys

[lieuzhenghong]

Users entrust us with their API keys and we don't want to expose them to undue risk.

What's the threat model here? Restrict push access to who can push to the data.

It's a governance thing --- either one of us becomes evil, or we leak the database in plain text somehow... we want to protect the keys somehow, store them in non-plain text such that just reading the database logs will not get you the API keys.