pkexec asking for password multiple times

I have an application foo that starts other applications (bar and baz) under the hood.  I start foo using pkexec and I have written a policy file for foo with: yes yes yes This way, it doesn't ask me for a password when I run pkexec --user \ foo.  So far, so good.  However, I recently made a change that first sets an environment var: pkexec --user env BLA=$BLA && foo.  Now I get asked for passwords for all the other applications!  I have to type the password for bar, baz and env.  I can understand why it asks it for env, but why also for the others where in the first situation (without the env) it did not prompt? I use Debian 9.4.