safely get gnome_env_vars
this MR is blocked by Follow-up on "Audit tca-portal" (!723 - merged)
The current way we get gnome_env_vars
is racy. It could be a potential attack vector, so let's get rid of it.
refs Audit tca-portal (#18374 - closed)
-
explain in comments why this works only once (ref. exist_ok=False
)