[ysh breaking] Turn off exported vars in YSH; only allow ENV