secret keys are reusable when stored in ENV variables