I've seen different ways of hiding api keys in an android app such as https://medium.com/@abhi007tyagi/storing-api-keys-using-android-ndk-6abb0adcadad
That assumes you access the key from a java file. But what if your keys are in the manifest, such as third party libraries like google maps?