pipeline: add new property private_env

This is currently unused but will return all the env vars that were
passed in as VAR (as opposed to ones that were VAR=FOO).