prevent tarbomb exploits, force correct file perms
add ccache support

- requires this patch to be applied to makechrootpkg:
  https://mailman.archlinux.org/pipermail/arch-projects/2013-July/003829.html