Build and run apps as the nobody user

Fixes #249
I originally added a `run_unprivileged` function, but I dropped it as I didn't think it added anything at the time. I'll add it back in