Provider settings
Keys are encrypted at rest. After save, the full value is not rendered again.