My first thought is to try and `rsync` as the `govuk-backup` user, like: `sudo -u govuk-backup && rsync ...`?