Store your secret environment variables with GPGME, and inject them into your current shell when needed.