support setting pub/private env var (e.g. private token setting use case for kbase)