Solve comparison between unsigned and -1 by moving a cast to where we need it.

the existing code already implied that a VCL_INT be large enough to hold
uid_t / gid_t.