add ENV for secure codes