put secret key in environment variable