masks password by getting it from environ