OpenClaw Secrets Guide: SecretRefs and What a Clean Audit Misses
6 minMove OpenClaw API keys out of openclaw.json with SecretRefs (env, file, exec), run secrets audit, configure and apply, and check the three places a clean audit still leaves keys exposed.