Return env vars according to secure_env_enabled? logic