init: allow specifying more supplemental groups

Change-Id: Ieddff448e949ceeeadfd3c35c55d3659d87a4569
init: run mediaserver as root to be MTK-compatible

Change-Id: I6a1a520ef3a53d73e4fd4e64472d674640b6b74e