The full key is shown once. Store it in a password manager. The CLI can also read it from a mode 600 file.