Add secure_getenv() support

Add secure_getenv() support

On systems with secure_getenv() (glibc 2.17+) use it directly.  For
the fallback implementation, check the current process uids and gids
in a library initializer, looking at the saved uid and gid where
possible.  Include a comment about more aggressive approaches to
detecting elevated privilege.

ticket: 8800 (new)