Feature requestion: options for sandbox

[netheril96]

This is a common optional feature among proxies and VPNs: after initialization is done, the process switches to a different UID and GID, often of nobody and nogroup, effectively living in a sandbox. This ensures that any bugs and security vulnerabilities in the program can only do very little damage.