Not ideal having our API key out and about like this, is there any convenient way to keep this hidden?