Capabilities fixes:

* Added option "--inherit-capabilities"
* setuid()/setgid() to original user (not always to root)
* Fixed building without capabilities support
* Try "nobody"/"nogroup" before "65534" on default values