title: how safe is it to use api key in client side javascript file?it can be easily use to create objects on my app using this api key?
body: <p>I am using a javascript sdk provided to us at our office?
  We are required to use api_key assigned when we create our app. to make any api calls on server? eg.</p>
  
  <pre><code>Built.app(api_key)
  </code></pre>
  
  <p>How safe is it to make that api key clearly visible to client?
  Because using the same api key a user b can create and use this api key to create unnecessary objects!!</p>