Right. Drake's variable are probably not the best option to pass S3 credentials, since they have a scope and can be redefined. Environment variables and/or command-line flags seem to be a better fit.