A SOC analyst is writing a Bash script that calls a threat intelligence REST API. The API key must be available to a Python script launched from the same shell session, but the analyst does not want the key hard-coded in either file or visible in the script's source. Which Bash command correctly makes the key available to the child Python process?