Now that it can use AWS tokens for auth, we need to be careful about
just dumping env into logs (and thus into splunk).