Add support for specifying an explicit group when dropping privileges.

Howdy --

I wanted to be able to run under a custom uid/gid pair, and key pf(4) rules based on gid; this patch adds support for explicitly specifying a gid via  new -m flag (for `membership` -- -g was already claimed), overriding the standard pw_gid.

Cheers,
Landon