A database integration calls an external model endpoint. Where should any required secret be managed when keyless access is unavailable?

1. Every generated user answer
2. A public SQL comment
3. The model's display name
4. A protected secret-management mechanism with scoped access and rotation