env import would be useful or some auth server that gets it.