Thanks for your response. Is there any way of keeping them secure and having the extension serve them up without having a user have to log in to Google though. Ideally I would grant only the Google app used for the extension access to it rather than a Google email or leaving it open.