secure env token from Brad