create tmp security key when running locally