`Popen` is the wrong place to implement this functionality.  It may be
reasonable to introduce a higher-level wrapper API which does this sort
of thing.  Consider that if `Popen` itself does it, though, then there
is no way to launch a process with a particular working directory
*without* PWD set in its environment.