move the api key to an env var (and it'll be changed ;))