How to work with API Keys?

Thanks for this great open source.
I’d like to know how to work with API Keys.
I saw some documents already in Peatio and Barong.

But I am still not clear about where to save Private Keys, from where I need to send request with kid and jwt_token to create accessToken, etc.

Could you help me with these?