title: How to prevent malicious developers from interferring with firebase in android
body: <p>I want to make an app which updates my firebase database but I see that no "secret" key etc is required and a developer only needs to know the firebase url to interfere with it. I don't think it will be hard to know the url when I am making changes from the client side. The security rules, as I slightly read them, can only prevent them so far.</p>
  
  <p>Basically the idea is that the users will do something and the code will decide to increment a value by 10. I can make this a security rule, but the problem will occur when a malicious developer will use his own code to increment it again and again when the value should not be incremented. What can I do to make sure that only my app can update the value?
  Can I pass a key or something as a parameter when updating database which the "trespasser" will not know?</p>