New API function: knet_handle_new_ex() taking handle flags

For now, the only supported flag is KNET_HANDLE_FLAG_PRIVILEGED,
which is also the default in knet_handle_new().

The tests are adapted to switch this flag off, which makes them pass
in default environments without privileges.

Signed-off-by: Ferenc Wágner <wferi@debian.org>