vadmin: Handle -S-arg and permissions better

Step 1: Open a CLI-connection on startup, before we drop permissions.

Step two: keep the -S-file open, even after we drop permissions.

Step III: Rewind the secret file instead of re-opening. Close it if
          authentication actually fails.

Fourth step: Make inconsistent number-styles on lists.