Secret key as envvar. Fixes #1