Add envVarExcludes setting to block named env vars

packages/node_modules/@node-red/runtime/lib/nodes/flows/index.js

@@ -70,6 +70,7 @@ function init(runtime) {
         typeEventRegistered = true;
     }
     Flow.init(runtime);
+    flowUtil.init(runtime);
 }
 
 function loadFlows() {
@@ -676,7 +677,7 @@ const flowAPI = {
     getNode: getNode,
     handleError: () => false,
     handleStatus: () => false,
-    getSetting: k => process.env[k]
+    getSetting: k => flowUtil.getEnvVar(k)
 }