make sure ci_user is able to start/stop the staging_app service