child_process: harden against prototype pollution
Improve robustness against something like
Object.assign(Object.prototype, {
cwd: '/etc',
uid: 82, // www-data
execFile: '/bin/rm', // using rm to "spawn" modules
execArgv: [ ... ],
shell: '...',
env: { ... },
...
});