handle provided env values as string literals, add docker fork/exec notice