pub fn clean_env_command(
secrets: &HashMap<String, String>,
keep: &HashMap<String, String>,
cmd_parts: &[String],
) -> SafeResult<Command>Expand description
Build a command from a clean environment, adding back only keep, then vault secrets.