externalizing environment settings. Now keeping secrets in secret ;)