Doesn't this need blacklisting or whitelisting of the ENV parameters we don't want to share with the world?