allowed_hosts moved at the top so can be overwritten by includes
nrpe_user and nrpe_group moved to a list