makes secure env vars sourcing optional