Don't use default secret in production
Prefix env vars with HEX_