Use env var instead of arg for secret

Use env var instead of arg for secret #34