Guide
Is a stream key a password? RTMP, RTMPS and account security
Treat your stream key like a password: anyone who has the key can stream to your channel. Prefer RTMPS, keep credentials in the system vault and reset the key as soon as you suspect it was exposed.