itemize encrypted environment variables