If the user does not need to access the filesystem, nobody should be used