This is a fully-socket-activated knot-resolver service that can run as
a non-priivleged user named knot-resolver.