decrypts aes256/base64 encoded environment variables.  useful for aws deployments where we want to protect credentials