superenv: don't let shims call the real xcrun

Fixes #17426