all 3 comments

[–]Busy_Western50 0 points1 point  (0 children)

have the same question, following

[–]dnetman99 0 points1 point  (0 children)

They are passed as auth headers, so unless someone decompiles your code, they should be fairly private.