The plugin uses your LiveKit API secret locally to create a short-lived room token for the avatar participant.
Protoface does not need your LiveKit API secret itself. It only receives the temporary worker token that lets the avatar join the room for that session.