Fix typo in safety annotations in envz_remove