How Do You Secure Subaccount API Credentials When Using Cloud-Based Trading Servers?

Deploying trading bots on external cloud servers or VPS environments requires keeping subaccount API keys secure. What encryption methods, IP whitelist rules, and restricted API permissions do you apply to protect your account against unauthorized access or platform breaches?