diff --git a/secret/main.tf b/secret/main.tf
index 179b74c..6c9ab51 100644
--- a/secret/main.tf
+++ b/secret/main.tf
@@ -288,7 +288,7 @@ locals {
   rotation_role_name = coalesce(var.rotation_role_name, "${var.name}-rotation")
 
   env_vars = nonsensitive([
-    for key in try(keys(jsondecode(var.initial_value)), []) :
+    for key in try(keys(jsondecode(sensitive(var.initial_value))), []) :
     key if upper(key) == key
   ])
 }
diff --git a/user-managed-secret/outputs.tf b/user-managed-secret/outputs.tf
index 7c90a99..9438f5e 100644
--- a/user-managed-secret/outputs.tf
+++ b/user-managed-secret/outputs.tf
@@ -5,7 +5,7 @@ output "arn" {
 
 output "environment_variables" {
   description = "Environment variables provided by this secret"
-  value       = module.secret.environment_variables
+  value       = var.environment_variables
 }
 
 output "id" {