add security related environment vars