best practices for storing credentials / api keys that get used by a script? e.g. periodic calls to an external service