Change $ENV_DIR behaviour to exposing private repo creds unless whitelist is set.