pull secret key from environ