Environment variables should be protected with :edit permission