proccontrol(1): implement 'nonewprivs'
(cherry picked from commit acb1f1269c6f4ff89a0d28ba742f6687e9ef779d)