Put back ??? in sys.props calls

[lihaoyi]

sys.props("doesntexist") returns null instead of throwing like I expected, so this change ensures any misconfiguration resulting in missing environment variables throws