protect against user env bleeding into tests