Add encrypted env var