Note, firebase api is app signed so no need to worry about having the json service thing outside the git repo as it CAN be in the git repo as its tied to the app signature so no one can hack it even if they have the file copied.