For documentation see MODULARIZATION.md. You should not expose these access tokens in publicly-accessible source code where unauthorized users might find them. Instead, you should store them somewhere ...