this should probably also require => [ User[$user], Group[$group] ] - because you don't want the service starting before those exist (which might be implicit, if the package creates them, but even in that case, it is better to be explicit about these dependencies)