When dealing with an API key (in this case a JSON file used to connect to the Google Analytics API), what is the appropriate way to securely store the keyfile?
"Your new public/private key pair is generated and downloaded to your machine; it serves as the only copy of this key. You are responsible for storing it securely."
Is the idea here that only specific user groups should have access to the API key? Say an administrator? Or if I have this on my server is that acceptable?