Prevent unbounded leak in Scm_SetEnv when setenv() is not available