I think you're right about base64 not being necessary, but some libraries use it, so I'd like to humor them.

I think AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY are the "official" env vars.  But I see your point, you  don't want to end up with [this mess](https://github.com/stuartpb/envigor).