Add comments to make it explicit when we're running external code that will elevate or drop privileges

Add comments to make it clear we're running code that will elevate or dropping privs, e.g. when we're starting a wrapper that will do so.

This will help us be conscious, when we touch this code, that we're operating in a sensitive context.

We expect this will be a LHF.