Risk of exposing ANTHROPIC_API_KEY

Im curious, given that the sdk runs using the ANTHROPIC_API_KEY and is required in the environment - how to prevent the agent from exposing the key?

Given that it requires the key in its env to run through the API, how can we avoid a user potentially getting the agent to leak the key?