pop environment variables in subprocess

avoid kernel processes inheriting server security values