Actually secure entries should go into the env section