Set supplemental groups for 'runas' in cmdmod.py

Fixes #4324, but it's also an important fix to properly runas in any situation.  Previously, only the primary gid was being set -- now we get all the user's groups and set the supplemental groups in addition.