env is now a list of name-value hashes

this keeps the semantics generic (FOO=1 is Unix specific) and convenient, in
both the config yaml file and the API
run resource scripts privileged

these are system configuration and should be trusted; privileged is required
for e.g. running docker