Report vuln for apache_mod_cgi_bash_env

Now with fewer false positives! It's kinda like a check method.