I am looking for people's opinion/expertise (past experiences) for how to structure the design/security for my Firebase JSON tree for things like "Groups"

I have seen/heard 2 possible structures:

```
Groups
 ---- GroupID (provided by firebase)
       ---- GroupPW (provided by user that create new group)
             ---- GroupName (provided by user that create new group)
             ---- etc....

```

Here the group password is directly under the group id, so the user needs to enter both the groupID and groupPW to be able to join the group. But by doing so they group password can never be changed since you can't change/rename keys in Firebase. 

Structuring the data this way:

```
Groups
 ---- GroupID 
       ---- GroupPW (provided by user that create new group)
       ---- GroupName (provided by user that create new group)
       ---- etc....

```

Here the GroupPW has been moved under the GroupID (a property of the group) but this leaves the password exposed to anyone who gains access to the structure.

Does anyone have a different structure they implemented, or did they see success utilizing one of the above structures?!