override security options from environment vars
v0.6.1