Does it isolate keys away from bots?

Yes exactly, keys are only injected at host boundary