attempt to put shared secret in env var