WIP decide whether trapping out env access is necessary

There are valid reasons to allow it, as discovered at day job.