Pull secret key from environment instead of hard-coding it.