nixos/dhcp: Modernize ddns-update-style
nixos/dhcpd: Add the ability to drop privileges