fix proxy public IP arg
pass correct ip/port args to proxy
pop environment variables in subprocess

avoid kernel processes inheriting server security values
spawn with sudo

instead of setuid

allows better restricted access, and doesn't require the user to be root.