Use secure_getenv(3) when available.