net/tac_plus4: Be explicit about the runtime user

It occurred to me that the tacacs user is set only at build time. So,
if someone assigned a different uid to their runtime tacacs user, the
daemon would, by default, run under uid 559. So, add a default
"-U tacacs" to the flags.

While here, fix a typo in the man page.