changed launchd template to run services as root