use nogroup on Debian based machines, nobody on RedHat ones
move osfamily dependent stuff into params