attempt at a single entry for secure env var