Use secure_global_env in .sync.yml