Make secret an envvar