A config file would be a better idea than an environment variable. (Be sure your config file has 0400 permissions!)

Environment variables are not always safe. For example, both Solaris 8 and 9 and Linux 2.6 have needed patches to keep other users from examining the contents of other users' environment variables.