move secret key into env when env=production