Add a -user option to set the child process's uid/gid