fix encrypted vars