keep out sensitive data
added example for do api key/client id