secure dev env variables