Well, I’d advise you not to include the keys in the source code, but make them part of a configuration file not checked in to source control / only enter them at build time. Anyone who wants to use your code would then have to obtain and register their own keys.
Note that the Developer Policy has limits on the number of tokens available for clients that replicate the core Twitter client experience / functionality.
