env property
Env is the app's environment variables, with every SECRET value masked to "" — the plaintext is in KMS and this surface never echoes it. That masking is why an empty secret value means "keep what is sealed" when posted back.
Implementation
List<EnvVarJSON> env;