Question: Does google maps javascript api-key (v3) need to be kept secret in HTML checked into github and if so, how?