env for fleetctl tunnel