change secure vars