moving secret keys to environment variables