The actual reason superenv's flag filtering isn't kicking in is because that's normally only active when called via `make` or `bsdmake`.