leave a sane environment behind (even if empty) when exiting
some OS atexit() handlers call getenv()