yet another go at multiple secure env vars, again