use Command;
/// Build a `Command` that has `ENVSTASH_PASSWORD` and `ENVSTASH_KEY_FILE` removed
/// from the child process environment. Use this for every subprocess we spawn
/// so sensitive env vars never leak to helper binaries (gpg, gh, ssh, msmtp, ...).
/// Return true if `program` is available on PATH.