randomly assign the key on server boot (unless provided in an ENV), and write to NATS kv so the matchmaker can access it for generating tokens.
that would be better, and less config because we dont have to tell the matchmaker the key, it'll be in nats per server.