Is it normal for my supabase key and url to be shown in browser network? Aren't these supposed to be private?