Variable	Description
`PXB_CLIENT_ID` / `PXB_CLIENT_SECRET`	Credentials for `pxb auth`
`PXB_PROFILE`	Profile to use when `--profile` isn't given
`PXB_BASE_URL`	Default API host for `pxb auth`
`PXB_CONFIG_DIR`	Config directory (`~/.pxb`, or `~/.pxb-dev`)
`PXB_SECRET_BACKEND`	Set to `file` to bypass the OS keychain
`PXB_DOWNLOAD_URL`	Where `pxb upgrade` fetches the binary from
`NO_COLOR`	Disable colored output

Path	Contents
`~/.pxb/config.json`	Non-secret metadata, mode `0600`
`~/.pxb/secrets.json`	Secrets, only when no keychain is available

Profiles keep environments apart:

pxb auth --profile staging --base-url https://staging.pxb.app
pxb customer list --profile staging
pxb profiles