record secure environment variables with placeholder values

 - change script name to be <pipeline identifier>.sh
 - also, cleanup, refactoring