parameterize keychain with env vars