Engines and credentials.

Keys live in your local database, never in the browser. Anything set by an environment variable wins and is shown as read-only.