One question, are the firebase config values (ie the apiKey, appId, etc ..) meant to be exposed or should we hide them in some way? Thank you!