I've set Firebase's security to make firepads IDs secret.

[This commit doesn't do anything by itself, just documents the config change]