Accept connections IDENT'd as 'custard' as well as 'root'

Needed for deploying custard as non-root.