added a TODO note about adding/using un-encrypted env vars