Hidden environment variables of the Groups

It's possible to define hidden/secured env variables only in the console, but those values are rewritten by env definitions in the code, that are widely available. So no way to use MaC approach with hidden variables