support tokens in env vars