tunables: Avoid getenv calls and disable glibc.malloc.check by default