doc the private key env var