Environment variables passed to docker run

The only reasonable way to "unset" environment variables holding credentials is to not set them in the first place. Don't use environment variables for credentials, or "secrets", in general.

The following provides a good summary: https://github.com/docker/docker/issues/13490 .