Shell exec takes over HOME and USER var; minor refactoring exec
Blacklist env vars from ciderex startup

  instead of whitelisting  everything else