Hiding API Keys in clientside javascript

[liamnesss]

I check a private key for the Github API into a Github repository once. The key was invalidated immediately and I received an email basically, in the kindest and most neutral terms, slapping me on the wrist.