ensure jetty runs as the right user