actually use the blacklist env vars
escape the values instead of using quotes