consider never using sandbox.preserve_env #1718

Currently, cms passes all env variables from the host into compiler and checker invocations. This seems quite unnecessary to me, and AFAIK is not mentioned in the manual. It is relatively common to pass api tokens or whatnot in environment variables, so server admins may unwittingly expose sensitive information in it (even though CMS itself doesn't use env vars for this).

All language compilers should work fine without any extra env vars (in #1545 i disabled preserve_env and only had to add PATH manually). I can't think of any reason to pass extra env vars to checkers (if you want to give it extra information, you can just hardcode it into the checker binary or something). Hence I propose disabling preserve_env for both compilation and checker runs.