Default to using secrets.js, otherwise use environment variable.