Anything you connect (your CRM, and more over time) is set up in the app rather than by pasting keys into a config file. You authorise it once, it belongs to your workspace, and its access is stored encrypted.
You stay in control: disconnect a connection whenever you like, and its access stops. Connections are a Team plan feature.