Openclaw uses the API key for Sonarr / Radarr, no secrets management (yet).
Though egress is heavily restricted for OpenClaw and everything is behind a FW.