Use environment attribute in execute resource so raw encryption_key is not logged.