autostart-app: Strip blacklisted variables from autostart environment
So far the blacklisted variables were not actively striped from the environment of XDG autostart applications. Update the code to explicitly unset the variables, preventing e.g. NOTIFY_SOCKET to be leaked to children.
Fixes: #36 (closed)