start: launch memcached with `-u nobody` option