need an env: section to put the secure variables