hide tokens from public stats

internal/handler/keys.go

@@ -71,7 +71,11 @@ func HandleGenKey(w http.ResponseWriter, r *http.Request) {
 func HandleStats(w http.ResponseWriter, r *http.Request) {
 	s.mu.Lock(); defer s.mu.Unlock()
 	w.Header().Set("Content-Type", "application/json")
-	json.NewEncoder(w).Encode(s)
+	public := make(map[string]interface{})
+	for _, v := range s.Keys {
+		public[v.Name] = map[string]interface{}{"name": v.Name, "requests": v.Requests}
+	}
+	json.NewEncoder(w).Encode(map[string]interface{}{"keys": public})
 }
 
 func HandleSecretReveal(w http.ResponseWriter, r *http.Request) {