Hide API key/secret into an ENV variable.