fix/acl: clear sgid in some cases

[jiefenghuang]

close #4496

[codecov]

Codecov Report

Attention: Patch coverage is 33.33333% with 18 lines in your changes are missing coverage. Please review.

Project coverage is 55.73%. Comparing base (249ea17) to head (196c001).

Files	Patch %	Lines
pkg/meta/base.go	0.00%	6 Missing ⚠️
pkg/meta/redis.go	42.85%	3 Missing and 1 partial ⚠️
pkg/meta/sql.go	42.85%	3 Missing and 1 partial ⚠️
pkg/meta/tkv.go	42.85%	3 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4551      +/-   ##
==========================================
+ Coverage   55.67%   55.73%   +0.05%     
==========================================
  Files         157      157              
  Lines       42941    42968      +27     
==========================================
+ Hits        23909    23947      +38     
+ Misses      16378    16362      -16     
- Partials     2654     2659       +5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[jiefenghuang]

Currently check user != root instead of capabilities