Calling rest API from plugin and how to secure the credentials in hosted plugins

Summary:

I would like to if there is a way to secure credentials that are configured in hosted plugins, which is calling external REST API's using fetch.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

25d

Code Snippet (add any code snippets that support your topic, if applicable):