another use of environment for credentials over encrypted databags