exec: clarify reasoning for euid/egid reset