New: Added no-process-env rule (fixes #657)

fixes #657
This should be off by default