Build PRs from external forks

How would we setup CIrcleCI to accept PRs from forks to our public repositories?

We have public repos and would welcome external contribution - how would we setup CircleCI to build PRs from external forks?

And to add more details - there are some environment variables (like docker username/password) we would obviously not like to expose on public builds from forks.