dotenv is alive. let the secret credentials flourish