put the mailchimp key somewhere safer