Add support for system user account

Some deployments use explicit UIDs starting from 1000, which clash
somewhat with puppet automatically starting there too, this mitigates
the problem by allocating in the 1-999 range