use env-var to control SASL