Use environment variables for secure keys