a job's stdout/stderr to a file, and "setuid" / "setgid" to execute a job as a different user/group. svn path=/nixpkgs/trunk/; revision=32744