test_ns: get VCA env for secret and pubkey