Hiding the secrets using a EVN hash. Forcing ssl in production.