add note about using ENV vars instead