`nil` means defaults to chef when envvar not set.