Make "restricted" environment(s) configurable