updated docs for sec env var