Thank you Decay
This is not possible for my use case because each user get some access tokens dynamically and i have to save this information somewhere. env variables are global
In the documentation says:
"Bot variables are not encrypted or stored securely. Do not save secrets like API keys or passwords in bot variables - use configuration variables instead!"ç
But what happens with user variables?