Documentation for subprocess.Popen()'s "user", "group", "extra_groups" args may need more usage info

It's very easy for someone that doesn't really understand the details of how to drop privileges (e.g. me) to use the "user", "group", and "extra_groups" args to subprocess.Popen() incorrectly ... or at least not in a way that gets the results they expect. Since there are potentially many reasonable patterns for using these It might be at least worth documenting that just setting "user" isn't a replacement for running a command under su or runuser.

Linked PRs

• gh-148129
• gh-148130
• gh-148131
• gh-148132
• gh-148134
• gh-148133

user、group、extra_groups 引数については、まず subprocess.Popen() のドキュメントから始めてください。作業に取りかかる前にリンクされている PR を確認し、その後、ドキュメントでそれらが権限に与える影響と、user だけを設定することが su や runuser の使用と同等ではない理由を説明していることを確認してください。