modified secrets with ENV variables