use server key, not global var