Run *-manage tools as the respective user for each service

We use a small run_as helper function to make this easier.

This helps fix some issues where these calls were creating log files
belonging to root.