I know workflows are in beta, but what is the recommended way to manage api tokens and whatnot that need to be used in the workflows?