Problems with switch_user_group when multi-threaded

If one thread calls switch_user_group and gets a guard, a simple assumption about the API would be that the user / group will be set to the values given in the switch_user_group call whilst the guard is in scope. However, that's not true because another thread could call switch_user_group.