my dev api visible to end-customer ? !

I’m new here :slight_smile:

bought elite membership, downloaded update notifications and unbranded video tutorials for a client site.

so I understand about the video tutorials. You setup the allowed domain here at wpmudev.org

but the update notifications requires an API key. I have put in the key I can find here when I’m logged in and it’s working great, but the api key seems to be visible to the end-customer (my client). Is that supposed to be like that ? and why ? – because if the customers chooses so, they *could* in theory copy a premium plugin via FTP, copy the api and more. That would be NOT good, as I don’t wan’t my API key to float around.

I know I must be missing something here, could someone please enlighten me :slight_smile:

thanks.