https://oxapay.press/payment-api-security-best-practices-for-api-key-security/