Does changing environment variables change mrenclave in gramine? If not we should double check which variables we should lock down at build time