Environment variables are inherited by container

[charles-l]

For my usecase at least, it would be useful to have an option to clear the environmental variables for the container like docker containers do...

This is probably considered an enhancement (but could also be considered a security improvement if users are carrying around secrets in their envs). I might take a crack at implementing it if I have a bit of time soon.

[anordal]

You are welcome to implement this, but as a user, you can always wrap your command in env -i.

[charles-l]

Great! Better to not add additional code if it's not needed. I opened a PR to add an example of env -i to the README.

The only other concern I have is from a security perspective. Assuming I have a secret an environment variable, and a malicious env binary in the container, the env binary could potentially steal the secret, right? If that's the case, I'll update the README with a warning.