fix the backend validation logic

we have to respect the user's wish by considering both the environment
variable we're providing and the runtime option arguments
-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTgVhDyNH/Z8QffkfaIX7fuGN4o2QUCYUj0AgAKCRCIX7fuGN4o
2WHqAQCJImBZXeSiViD4tvueb8YbVhQr7eEbwHGz1otb7aUm2wEAznvcXiGl4yek
M4CIBRAWJzlbeFiZ+amJKdXKyqGQagg=
=QmJh
-----END PGP SIGNATURE-----