allow user to protect flow editor using environment variables