When invoking an Edge Function from browser, the project anon key can be seen in the apiKey header

[kellemar]

Would this be a security issue? Are we able to hide it, since the user's JWT is already in the Authorization Bearer Token.