As you suggested earlier .. store those values in a secret.json file in your bundle and lock it down