Hi, we want to leverage the private API calls in FF but we're not able to confirm they are exposed when the flutter flow client makes the request to the ffPrivateApi call.
When specifying a FF api call as "private", how do you specify / configure a given secret key as actually being managed via the firebase secret manager (or however), rather than having all variables made from the client passed to the ffPrivateApiCall cloud function in plain text as part of the JSON body?
Something that wasn't clear about private keys to us, or maybe we missed it, is that they're uploaded as plain text into GitHub for other devs to see.
lso s