Allow specifying the API key rather than creepy ENV state