server-side secrets are safe with me, but I still get the heebie-jeebies when my React app runs out of memory #ghostsofjavascriptpast