mandatory secret key from environment