Support disabling drop_privileges()

Since custom extensions may need to access more syscalls than memcache
daemon, allow disabling drop_privileges() with "-o".