Build and run apps as the nobody user

Fixes #249
Does it make sense to put `setuidgid nobody` in a variable, or perhaps `nobody` or both?