Suggestion: use the secret service to store the API key?

[Trevoke]

I believe this can be used effectively to store the API key securely: https://www.gnu.org/software/emacs/manual/html_node/auth/Secret-Service-API.html