have to put constraints in separate var

adding --constraint flag to $CABAL doesn't work since e.g. the 'cabal
update' command doesn't know what to do with a '--constraints' flag,
and falls over.