Refuse to run as root.
Refuse all update requests.
Move adept config to /etc. Fix ownership in postinst.

This requires adding a system group to go with the piaware user;
the config file contains passwords that should only be readable by
piaware, so we make it owned by root:piaware, mode 0640.