yup, I agree, revealing those keys can allow potential bad actors to access your data. A best practice would be to limit it to only read access then put them in an environment variable.

Very well explained :)