Comment by timmm

I just changed that to take the public key, thanks!. Users get a private and public key, the private key will work in all areas but should never be exposed. The public key can be exposed and in the dashboard you can white list the allowed origins.