read key/secret from environment var