Cannot do secure env vars based on pull requests