thats why you shoudln’t store keys in plain text :P lol
(seriously though, make sure to reset and hide your API key so people like me don’t take advantage of it)
do I need to hide my appid also?