We should avoid holding a private key in a configuration env var. Instead we'll have an env var provide a path to a file which holds the private key.