need a -- after exec to mark end of startstopdaemon's parameters