testing out secure env vars, don't know what i'm doing