Prevent API key from going public