Merge "thermalservice: run as user+group system, not root"