env variable setup + user de-escalation