Adding unpriveleged/priveleged execution jails and better command-line parsing

Instead of just a single prefix for commands, add a prefix for trusted checks
that can run as root, and a separate one to run checks as an unpriveleged user.
Also, switch away from using "/bin/sh -c" for spawning checks, and use wordexp;
this will make sure people can't inject malicious commands into their checks.