nixos/dnsmasq: Use the dnsmasq user instead of nobody