It looks like it's always running as user nobody (hardcoded in code) and then this group. We might want to be able to use a haproxy user & group (expecting the security team to raise this).