I much prefer the ENV method because it keeps private keys and passwords out of source control.