get encryption key from environment if available