accept extra env keys to be hidden as parameter