add robustness: fix permissions/ownership of cache_dir
bugfix: don't use su to execute squid

rational:

- squid already drops privileges by itself so su is redundant

- su will execute squid without a tty, so squid won't get signalled when we
  terminate it.