use private config to store spreadsheet api key