Accessing Sugar Oauth Keys in PHP

I am creating a dashlet to access Box files and folder in an Account record. I need to authenticate to Box's API in my php code, but I don't want to hardcode the credentials. What is the best way to secure my Box API credentials? I am using SugarCloud, not on-prem.

I think I need to add the credentials to the Oauth Keys section on the Admin panel, but how do I then access the client_id and client_secret keys from my php code?