perl: securely handle duplicate environment variables [CVE-2016-2381]