Don't set a secret_key in the Dockerfile

Setting the key in the `Dockerfile` means everyone that pulls the
image from the public index gets the same key. This moves the key
generation to the `setup-configs.sh` script.

Let me know if I'm misunderstanding. This will mean the existing image
needs to be regenerated and pushed of course.