That depends on who your audience is.<p>&quot;I need the user&#x27;s database credentials&quot; -- cool, find them in this convenient spot anyone can hack!<p>&quot;I need the user&#x27;s facebook and google api keys&quot; -- cool, find them in this convenient spot anyone can access!<p>Obviously, what is needed is an OS-level keychain that can be accessed by the installer. I wonder if anything like that exists... ;-)<p>It would be awesome if the user could be walked through creating all the external accounts, apps and api keys if the external service doesn&#x27;t provide an API for this. If it does, then hopefully it provides an oAuth flow for it.<p>Come to think of it, everything should just be an oAuth flow :)