[nemo] Implement checking of effective GID of caller

This allows us to do fine-grained permission checking without
the limitations of the D-Bus busconfig XML configuration files.