MFC r287345:Drop group privileges after opening the kvm descriptor, otherwise, the codewould not drop privileges as expected.While there also add checks for the drop and bail out immediately if wefailed.