Properly define nconf so that only devs gets to load the API keys