The Atlassian HipChat plugin for various products leaks the secret key it uses to communicate with a linked HipChat instance.