read secret key from env var