This MR adds libcap-ng optional dependency (in order to drop capabilities), and sets RT scheduler. The means to get the right capabilities are ATM undetermined, but setcap CAP_SYS_NICE=+ep /usr/bin/gnome-shell kind of works.
The capabilities dropping was made to also work for !454 (merged)