API key should be hidden on environment setting page

[luk355]

For security reasons, API key should be by default hidden when entering Environment setting page.

One solution would be display dots instead of real API key characters and add a new button to show key.

[dabeeeenster]

The API key is not private - its sent to clients and trivially discoverable in code, similar to a Google Analytics API key. There is no reason for it to be secured.