What is the variable scope for a workflow when I initiate more than one invocation?

Petar : How to pass my api key and be sure it is stored safe?