hiding private key under an environnement variable