Where the Stripe keys belong

The secret key and the webhook signing secret can be set as constants in wp-config.php, and when they are, the hub uses those and hides the fields.

That is the better arrangement: the keys stay out of the database and out of any database export.