added ability to change effective user and group for each child by setting "user" attribute in child properties, but must have permissions to do so or will fail