How is my Paypal API settings being protected?