need to check authentication, permissions and secutiry -
anyone that that have the keys file can connect directly to the firebase and do anything
is it possible that someone that have the application installed, can fetch somehow the key and connect directly to th DB