Some fixes for running custard as non-root

Please do not merge yet. This requires changes to scraperwiki/charms.

 - [x] Fix: Cobalt currently checks the ident of the connecting custard instance and expects it to be root
 - [x] merge charms#3
 - [x] merge charms-secrets#2