journal: make gatewayd run under its own user ID