Environment variables and secure configuration