provisioners/chef: env config less restrictive