does the secure env var work