I have a similar issue however my app is a plugin for another application and now those keys need to be transferred to every systems that will use this plugin.

I have a similar issue however my app is a plugin for another application and now those keys need to be transferred to every systems that will use this plugin. The host application and all plugins are written in Node so these api keys don't get compiled into the source and will be sitting clear text. How can I secure these keys?