your provider api key is never stored here. how it works ↗