use double quotes for env interpolation, change role