Often one needs to provide (secret) env vars during build step in docker. Currently the only way to do that is to modify Dockerfile (and potentially leak secrets).
This is suboptimal. We should pass all env to build step as well. Or maybe add separate "build_env" prop in config?