pull secret key from environ to be a little more secret about it