Huge fan of the service and have enjoyed reading about the stack and other insight on how Trello came to be. Keep that Up.

Quick question about how you are handling security for your API. Are you using a 2-leg OAuth setup for your web requests? How do you handle the security of having the "secret" in the code?