Yes, absolutely! If you already use supabase, you should use it as a proxy for airtable. Meaning you need for example an edge function in Supabase that only authenticated users can call. And in this edge function you call Airtable from your backend. Otherwise, users can always see the API key