Use start-stop-daemon to run squid and change UID/GID
Even when we just want to run squid in a non-daemon, we have to resort to start-stop-daemon because the process needs to be executed using squid's UID/GID (i.e., proxy:proxy) every time, due to apparmor restrictions.