Server runs as splunk fixes

Previous PR was well tested around standing up a fresh splunk server and running as either root or splunk.  Todays effort is more about switching between these users (and vice versa) on running splunk servers.  The only thing I haven't figured out how to address is stopping the splunk service if a user switch is detected: right now this is a manual step, stop splunk service, then change runasroot (true|false), then ccr, and the permissions changes will happen and splunk will be started up as the appropriate user.