use env-vars to control SASL