title: Does google maps javascript api-key (v3) need to be kept secret in HTML checked into github and if so, how?
body: <p>Looking at the <a href="http://code.google.com/apis/maps/documentation/javascript/tutorial.html">developers guide for the Google Maps Javascript API v3</a> it explains first about how to obtain an API, then shows examples of including that key in the HEAD section of an HTML page e.g.</p>
  
  <pre><code>&lt;!DOCTYPE html&gt;
  &lt;html&gt;
  &lt;head&gt;
  &lt;meta name="viewport" content="initial-scale=1.0, user-scalable=no" /&gt;
  &lt;style type="text/css"&gt;
    html { height: 100% }
    body { height: 100%; margin: 0; padding: 0 }
    #map_canvas { height: 100% }
  &lt;/style&gt;
  &lt;script type="text/javascript"
      src="http://maps.googleapis.com/maps/api/js?key=YOUR_API_KEY&amp;sensor=SET_TO_TRUE_OR_FALSE"&gt;
  &lt;/script&gt;
  </code></pre>
  
  <p>Is there any need to keep this key secret, given it is used for rate-limiting and suchlike?  In particular I'm thinking about if I put my work onto something public such as GitHub, do I need to remove my API_KEY before committing?</p>
  
  <p>Is the answer in configuring within the google API settings that the key is only valid if it the webpage the key is within has been served from a domain name that I control?</p>
  
  <p>UPDATE - was using:
  <a href="http://maps.googleapis.com/maps/api/js?key=YOUR_API_KEY&amp;sensor=SET_TO_TRUE_OR_FALSE">http://maps.googleapis.com/maps/api/js?key=YOUR_API_KEY&amp;sensor=SET_TO_TRUE_OR_FALSE</a>" from Google tutorial linked above.  Removed the api-key and all seems to work fine.  Am confused about the Google tutorial telling me I need to use it though...</p>