Instead of using `su`, it's easier to use systemd's User and Group configuration options.