using env-var for decryption