Use secret token based on an env var