support setting hmac key via env var