Run interpreter processes as a different user with limited privs

[erkyrath]

This is the way it ought to work, but it's a pain. See docs on seteuid() and execve().

We'd have to create the autosaves and savefiles subdirs with appropriate perms, of course. I don't think the interpreters need to write anywhere else.