api-key exposed in contract

[ad3109]

In current iteration, the api-key for requesting the commodities is completely exposed in the contract.
If this is the link of a paid subscription, anyone could copy it out of the contract and start using it for themselves.

So, we need to find out how one can obfuscate this / encrypt it.