knot-resolver: run as kresd user

We should run knot-resolver under kresd user. It shouldn't be problem to drop privilages after start see http://knot-resolver.readthedocs.io/en/stable/daemon.html#c.user

The only problem could by with /etc/root.key which is provided by resolver-conf package but it could be solved by resolver group.