replace getenv with vconf call for security issues