how to deal with secret api keys

I thought this might be good app to have on f-droid.org, but I discovered only after setting up the build that there are secret api keys missing. If such things can't be included in the source code or inputed by the user then the app would never go on f-droid.org. Is there a workaround?
