Allow setting the user to run prosody as.

While it can already be set via 'custom_options', it's important
enough to encourage dropping privileges.

Case in point, prosody runs as unprivileged _prosody:_prosody on OpenBSD.