extracted `env-allowed` and `env-accessor` modules.