Comment by kellpossible2

or an outbound call to a trusted endpoint with the env var in a way that can get exposed to the agent via a subsequent call?