This patch adds a spank plugin hook that is called just after
fork() within each task, but before elevated privileges have
been dropped. This allows plugins to run privileged actions
on a per-task basis, which wasn't possible with the existing
task_init hook called just before exec.