add env vars to secrets