I was also wondering I'm using an api key that I would like to keep private, is the code of the actual suitelet itself available from simply accessing the page?