server2: check if running as root
vs: split initVCs into _startVC
vs, vcexec, preauth: handle SIGINT