add ENV calls to secrets