Get security settings from env.