secure env variables / additional devise