API key either via filename or environment variable