Create a Binance API key WITHOUT withdrawal permission, and IP-restrict it to this server. Never share a key with withdrawal rights.