Changes from pkg 1.9.0
- fix file descriptor leak on system without utimensat()

Changes from pkg 1.8

- Drop privileges in many commands
- Drop privileges when fetching a file
- Add resource limitation to sandboxes
- Add support for metalog
- pkg-delete now print a warning if no packages were matched
