To connect the API to your game you need a key that goes in the GJAPI.sGameKey variable,

but that means that anyone else could go to the gj-js-api.js file and look that key, which is supposed to no one could have, just me, since they could send false requests pretending to be my game, as the Game API Settings section says.

What can I do to protect that key? Is something I'm missing off?