Clearing your environment variables after reading them, and only passing the ENVs required to perform the new task are pretty basic security measures. This was

Clearing your environment variables after reading them, and only passing the ENVs required to perform the new task are pretty basic security measures. This was pretty common practice in the 90's, and then I was hoping that would be one of the lessons out of ShellShock.