You might like the wrapper approach. My hosts have restic-b2
/restic-s3
s for their B2/S3 repos.
[david@pc ~]$ sudo cat /usr/local/bin/restic-s3
#!/usr/bin/bash
export AWS_ACCESS_KEY_ID='...'
export AWS_SECRET_ACCESS_KEY='...'
export RESTIC_PASSWORD='...'
export RESTIC_REPOSITORY='s3:https://s3.amazons3.com/...'
exec restic "$@"
[david@pc ~]$