Fixes #5172: Run the ncf api as the ncf-api user instead of the httpd one