I don't get why everything is not marked as sensitive in env vars by default instead.