Ignore sec group data bag files
Remove unneeded bits
Access the env vars indirectly via attributes