How to handle API calls that require expiring values? eg. recaptcha keys

The testers at our company obviously have access to our Postman collection as they are testing the endpoints.

Today, I came across this problem where our createEmail endpoint required a recaptcha key (generated by the “I’m not a robot” prompt) along with the normal e-mail info (sender, topic, subject etc.).

If I add a createEmail call to Postman and hard-code the recaptcha key in the request (or add it to the environment), the createEmail call won’t work a few hours later because the recaptcha key expires.

I wanted my Postman collections to be working out of the box without caveats like this. How do you guys solve problems like this?