DOCS_TOKEN to gate Postman downloads in production.SWARM_HEALTH_ENABLE=true only when needed; prefer SWARM_TOKEN to gate access.DOCKER_TLS_VERIFY=1 and mount certs via read-only volumes.VPN_TOKEN to gate VPN config endpoints; download only over secure channels.