ICSHWI-7098 Run as iocuser:iocgroup and not as root:root

Running as root is problematic in many ways one of which is that root is not allowed to write to the nonvolatile NFS share that is used by autosave. However, simply running as iocuser causes problems with realtime IOCs; added CAP_IPC_LOCK so that mlock() and mlockall() works as expected