So Im programming a public chrome extension and I will be reading/writing on a database. The code of Chrome Extensions is visible to anybody that installs it. So how do I access the server without showing any passwords or giving the user the option to write something there theirselves what isnt supposed to be there? How do I secure my server for open-source code?