Add openshift_watchman service

Does this actually need to be 0644 or can we use 0640?