API keys and library credentials are never entered in the browser. Status fields are read-only projections.