Encrypt the data with some sort of AES or whatever. The plaintext should only be in memory. Does everything needs to be encrypted or only the API Keys?