lets it be changed live without a redeploy/restart, and sidesteps whatever was causing PROXY_PASSWORD not to reach process.env in prod