use env set over encrypt