Use ENV variable to salt API key

With thanks to @rjmcdonald83 and @seeflanigan for pairing with me
to work through all the logic of what had to happen, and how to test it.