Secure requests from a scripting block

Wonder if anyone has ran into this issue before?

I’m trying to hit my API from a scripting block. I can fetch a request with the relevant data but struggling to find how to secure the request:

• is there a way to store/generate secrets in Airtable? I thought about hashing the Session and sending as a header but I cannot import a crypto package or similar in the scripting block
• if not, what is good way to secure requests coming out of a scripting block?