Make sure Upstart template uses setgid

It was using setuid to set the group, previously. Oops.