Improve tree-filter and env keys

Allow default key for encryption to be indicated
in environment variable.