allow TRAVIS_PULL_REQUEST to be a number and make sure we do not export secure vars for pull requests