more secrets env vars