What's the best practice for storing the Cloudflare API token securely when using Certbot?

The Cloudflare API token should be stored securely to prevent unauthorized access. Consider using environment variables, ideally in a non-persistent manner (e.g., set just before running Certbot). Avoid storing the token directly in the command-line arguments or configuration files. Use tools like `docker secrets`, or encrypted configuration files that can be accessed only during runtime to further enhance security.