How do you stop an LLM from leaking API keys in the code it writes? Default to secret

On July 22 I typed a one-line prompt on a test app: a widget built on a well-known REST API, the kind...