Add encrypted vars

Make spec project-independant