It would be more secure to create a new system user 'plight' than to give nobody write access to all these things.

there are good scriplets for the spec file here:

https://fedoraproject.org/wiki/Packaging:UsersAndGroups

Personally i prefer to pick a random UID and use it statically, but i don't think that will be necessary for plight.