pub const ENV_ALLOWLIST: &[&str];Expand description
Host environment variables a scrubbed child is still allowed to see. Chosen to let normal programs run (binary resolution, locale, temp dir) without exposing secrets that tend to live in the ambient environment.