Should allow_failures.env be a string?

Probably `matrix.allow_failures.env` should be a string when I don't
use `matrix`/`global` in `env`.