Change makeTerm() to tunnel X11 using socat if needed

For local display, allow local root access
For remote display, tunnel with socat/mnexec
This should enable *wireshark in hosts* and fix #119