Pension funds and faith-based groups can take on the likes of ExxonMobil on carbon risk, but the task is difficult without management support.