nixos/dhcpd: Add the ability to drop privileges