Point taken. Allow me to revise my statement. "In production, one should create a specialized user to run any service." And if you have lots of money to waste,

Point taken. Allow me to revise my statement. "In production, one should create a specialized user to run any service." And if you have lots of money to waste, stick 'em all in separate VMs too.