Fixes #5172: Run the ncf api as the ncf-api user instead of the httpd on...

...e

Ticket: http://www.rudder-project.org/redmine/issues/5172

To be merged in 2.11
Since our ncf api user is a system user, I feel you should be using --system here to create a system group.