better use of getenv in prior add hooks to support enforcement of ssl/x509 database...