I am setting up a website using Firebase and Firestore, and I\'m trying to restrict the use of the API key, to avoid anyone to use it (since the key is publicly visible in t