Consider starting node with root privileges

[mrcnski]

I mean, doing that like most privileged UNIX daemons do. Starting up as root (or with suid bit), doing things requiring root (open privileged ports, subscribe to audit events, etc.), and then doing setuid() to drop privileges to the regular user level.

Originally posted by @s0me0ne-unkn0wn in #1685 (comment)

[burdges]

Afaik you could've a different setuid binary, which drops privileges before substrate runs.