cf_registrar should run as vcap user
uaa should run as vcap user
login should run as vcap user
nats_stream_forwarder runs as vcap user