api keys based on the server not the environment