Just having them hidden from the user is enough to be honest! No method is going to be 100% extraction proof, but as long as you're making some effort to hide the font a bit it's fine.
