Disable ptracing before calling setuid, rather than after

This avoids a small window where a process could be ptraced by another
process running as the unprivileged UID.
Fix typo in man page
Support transparent connections from the local host