Environment variables should be protected with :edit permission

@liggitt review