#plaintext api key exposure