What are best practices for using Supabase with a browser extension?

I'm particularly interested in how folks handle keeping their API keys secret?
Was this page helpful?