use execvp and drop privs for calling status

RFC. I don't see how the earlier version worked, but I assume it did work with the existing maas path?

Anyway, I've seen this work once but am having problems testing it because juju will occasionally fail to bootstrap, which is probably unrelated. That's why this is just a PR.