@garrypolley Okay, cool, thanks for the info.  So it seems like that change is not CentOS-specific but is an enhancement to address a new use case (i.e. running the processes under different users)?  I'd recommend proposing that change as part of a separate pull request then.  That will keep the discussions, patch, etc more narrowly focused.  Also, did you consider making the permission customizable (e.g. via an attribute)?  That way the permissions can be relaxed only if needed (like in your use case).