Fix KitKat VPN; update libsuperuser

The libsuperuser "dead shell" fix is still pending upstream.