Atlus runs as root (systemd) but user-facing processes must run under the
authenticated user's identity. Added privilege-dropping via preexec_fn
(os.setgid + os.initgroups + os.setuid) to both terminal PTY spawning
and GUI app launching. System admin operations (services, packages,
network, updates) intentionally remain root.
Autostart apps now support a configurable default_user; without one set,
autostart defers until the first user logs in and runs as that user.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
