exec: reduce impact of the Shellshock bash exploit

	* by default, do not set any environment vars for exec commands
	* improve documentation awareness for Shellshock