Function is_denied_env_var 

pub(crate) fn is_denied_env_var(name: &str) -> bool

Returns true if name is a denied env var (case-insensitive prefix match for BASH_FUNC_).