Remove buildUser from DerivationBuilder

The use of a `buildUser` is an implementation detail of some types of
sandboxes that shouldn't exposed.

src/libstore/build/derivation-building-goal.cc

@@ -655,8 +655,8 @@ Goal::Co DerivationBuildingGoal::tryToBuild()
         builder->startBuilder();
 
     } catch (BuildError & e) {
+        builder.reset();
         outputLocks.unlock();
-        builder->buildUser.reset();
         worker.permanentFailure = true;
         co_return done(BuildResult::InputRejected, {}, std::move(e));
     }

src/libstore/unix/build/derivation-builder.cc

@@ -106,6 +106,11 @@ public:
 
 private:
 
+    /**
+     * User selected for running the builder.
+     */
+    std::unique_ptr<UserLock> buildUser;
+
     /**
      * The cgroup of the builder, if any.
      */
@@ -264,7 +269,7 @@ public:
     /**
      * Start building a derivation.
      */
-    void startBuilder() override;;
+    void startBuilder() override;
 
     /**
      * Tear down build environment after the builder exits (either on

src/libstore/unix/include/nix/store/build/derivation-builder.hh

@@ -138,11 +138,6 @@ struct DerivationBuilderCallbacks
  */
 struct DerivationBuilder : RestrictionContext
 {
-    /**
-     * User selected for running the builder.
-     */
-    std::unique_ptr<UserLock> buildUser;
-
     /**
      * The process ID of the builder.
      */