fix?
move sensitiv data to env