Wix Blocks - where should we store API keys with no secrets manager?

Question:
I’m currently building a Wix Block (App) which requests data from an external site API. This obviously requires an API key, but Wix Blocks doesn’t support a secrets’ manager. Are we expected to hard code the API keys in the backend script?

And if people install my block (app) I can’t expect them to all create their own API keys and store them in their own secrets managers.

Any help appreciated.

Product:
Wix Blocks (Apps)