Upgrader hardening: comment out sudo env_keep settings that are not needed in production

IIRC kurono verified that these settings did not create security vulnerabilities
in practice, but I find it safer not to take any chances, and I prefer not
having to constantly reason about whether that remains safe enough.