system_command: validate `reset_uid` and `run_as_real_uid` usage

These two cannot be used at the same time. When `:run_as_real_uid` is
set, `#exec3` just ignores `:reset_uid`, so we should prevent callers
from trying to use them simultaneously.