Restrict zygote to system user.

CVE-2011-3918: Address denial of service attack against Android's
zygote process. This change enforces that only UID=system can
directly connect to zygote to spawn processes.

Based on Change-Id: I89f5f05fa44ba8582920b66854df3e79527ae067

Thanks to Nick Kralevich