Currently API keys are stored inside the config file in `~/.q/resources.json`. This is not the correct way to store secrets, and we should eventually store them properly in a separate file.