title: Google maps api key in html/javascript
body: <p>I want to embed a google javascript map to my web site.</p>
  
  <p>In the docs at: <a href="https://developers.google.com/maps/documentation/javascript/tutorial" rel="noreferrer">https://developers.google.com/maps/documentation/javascript/tutorial</a></p>
  
  <p>It says that I should load the scripts using my api key in the url:</p>
  
  <pre><code>&lt;script src="https://maps.googleapis.com/maps/api/js?key=YOUR_API_KEY&amp;callback=initMap"
  async defer&gt;&lt;/script&gt;
  </code></pre>
  
  <p>Doesn't this mean that anyone can get my key?
  All of my other google api keys, are server side, and are not in my source control. It seems here that this key is exposed - which makes me a bit uneasy.</p>
  
  <p>I feel like I'm missing something, is there a reasonable way to hide this key - or is it meant to be that public, and if so, how do I prevent abuse.</p>