using a sudo approach to changing from root => <user> in rndaemon subprocess, to ensure supplemental groups are correct