hide the application id and client key