When discussing TOOLS-2963, I noted that it may be useful to allow users to supply connection & authentication information via env vars, instead of just via the CLI. This is useful in cases where people want to run the tools in an environment like Kubernetes pods, where they may want to retrieve secrets from a store like HashiCorp Vault, and where passing this information via the CLI may be awkward.