trying secure env a different way