moved secure environment variables to global