@Andriy Knysh (Cloud Posse) this provides an escape hatch, where if users specify

--mask=false

, atmos will not attempt to pass sensitive values via ENV vars. github.com/cloudposse/atmos/pull/2770