hardening: Use __secure_getenv() in *addition* to _dbus_check_setuid()