Everyone also knows the API keys that are used for requests from clients (apps/websites/etc.). ;)