Usually with secrets in environment variables or headers.

Ah I see, makes sense.

Would pair well with direnv to set the right keys per project.