Support coopr-security.xml

This file needs to be owned by the user who will be starting the server. Currently, this is always `coopr` but this should be configurable.