Which method should be used to safely store the API keys?

Which method should be used to safely store the API keys?

A. in an environment variable unique to the system database B. encrypted in a configuration file that is separate from the code C. plain text in the code as a constant D. encrypted in the code in a function