moving placement of secure api key