Environment variables are an easy first pass at ensuring a script at rest isn’t dangerous.