hide API Key and Secrets