suitelet is server side so it's protected - if you attach a client script that becomes available in the browser