How to prevent client privacy abuse in Java client program?

Question

I have a Java client program that makes calls on Github API servers. As you may know, Github has an API access limit of 60 calls per hour for unauthenticated users. I want to use the client key and client secret to limit this limit to 5000 calls per hour, but how can I prevent other users using my client application from decompiling the code and getting my client's secret?

Please note that the application requires access to the actual secret client and key, but I need them to be hidden from the user.

Answer 1

I solved this using the Github private key with the only privilege, access to public repositories. One more thing: Does anyone know if the checkbox in the menu of personal key areas includes, allows or denies access to this area? For example, if private repositories are checked, does this mean that I can or cannot access them?