If its still important for you to hide the searchkey, you could proxy the search API call through your server, forwarding on the call to app search with the public key included.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.