add secure env in right place