This will get downloaded to clients and isn't obfuscated or anything.
We prefer to have clients call Alchemy directly so we don't get any unnecessary user data.
If we end up concerned later that somebody is stealing our API key, we can reset it to another one and roll out some better obfuscation via a Webpack plugin or something.
Depends on D6112