nginx should run as the puppet user