secure-input is running.
Environment value requests arrive here as single-use links.