update antigen at startup
move static env vars into .pam_environment