Set NESTSHIELD_SECRET in your .env to configure access