run mail_on_failure with User=nobody