Pasted keys stay in your browser. Clio sign-in is handled server-side; the Clio secret never reaches this page.