handle key/secret from command line and from env