hid the key and secret in env