[riobard]

SystemD has this nice feature called DynamicUser, making it much more pleasant to deal with unprivileged user and nasty ID.