diff --git a/flake.nix b/flake.nix
index 984e6f47..6daf5e0d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -106,7 +106,7 @@
             shellHook = ''
               echo "Entering $(npm pkg get name)"
               set -o allexport
-              . ./.env
+              . <(pk secrets env Polykey-CLI)
               set +o allexport
               set -v
               ${lib.optionalString ci ''
diff --git a/tests/utils/utils.ts b/tests/utils/utils.ts
index 59c21648..0d9c68db 100644
--- a/tests/utils/utils.ts
+++ b/tests/utils/utils.ts
@@ -115,6 +115,7 @@ const cmdArgsArrayArb = fc
 const vaultNameArb = fc
   .string({ minLength: 1, maxLength: 100 })
   .filter((str) => binParsers.vaultNameRegex.test(str))
+  .filter((str) => !str.startsWith('-'))
   .noShrink();
 
 export {