An admin who cannot read the write-only key could point base_url at their own host, leave the key redacted and have it sent there on the next call. An update that keeps the stored key may no longer change the adapter or base URL; changing either needs the key re-entered.