keys are now outside of the Dockerfile