#862340 minimize security risk due to dnsmasq running as nobody