diff --git a/my-proof.manifest.template b/my-proof.manifest.template
index 1d9e395..bc5048b 100644
--- a/my-proof.manifest.template
+++ b/my-proof.manifest.template
@@ -10,6 +10,9 @@ fs.mounts = [
   { path = "/output", uri = "file:/output" },
 ]
 
+# Whitelist ENV variables that get passed to the enclave
+loader.env.USER_EMAIL = { passthrough = true }
+
 # Gramine gives a warning that allowed_files is not safe in production, but it
 # should generally be fine for our use case which inherently assumes that input
 # files are untrusted until proven otherwise.