Ambient credential environment variables that must be stripped from any
subprocess audex spawns with scoped credentials. Leaving these in the
child environment would let the subprocess fall back to the operator’s
personal credentials via AWS/GCP/Azure SDK precedence rules, bypassing
the scoped session entirely.