What are safe defaults for passing env vars into tool-calling runtimes?