run as group opmuse (in addition to user opmuse)
use dpkg-statoverride to fix permissions

also, use a more stict umask, 026
drop privileges for whoosh reindex command
change missing tracks alerts to warning alerts