Switching user within a snap

There are some interfaces but we don’t yet have a generic way to let a snap run as an dedicated user. There were some roadblocks before but perhaps now we could explore adding that with seccomp argument filtering.