chrome extensions leaking data due to hardcoded keys