fix secure env vars, new attempt