pipeline: pass private env vars to the subprocess

We don't want to pass secret passwords via the commandline (which can be
viewed by any other process), we pass the private env vars to the
subprocess directly.