move secret key to env