Fix placement of secure key for npm