get secret key from envvar