support reading passwords from environment