disallow them itself. ok deraadt@ millert@, gsoares@ and aja@ like it too.
("nobody" still needs to be listed).

* _afs: arla/nnpfs got disabled then removed long ago
* _kdc, _kadmin: these were added 10 years ago but never used for
anything afaict
ok dcoppa@ beck@

ok sthen@ deraadt@

OK claudio@

pointed out by jsg@

ok deraadt@

run by root, it binds a shared address to the socket, cranks the
process priority and drops privileges. sio_open(3) will try to
connect to the private socket first (if any), then to the shared
socket. Only one user may have connections to aucat at a given
time.
based on discussions with henning, pyr and others
ok jacek, deraadt

approved by deraadt@, ok thib@

what the daemon does - it is a relayer that pays attention to the status
of pools of hosts; not a status checkers that happens to do some relaying

start.
ok dlg@

ok miod@, henning@

ok claudio@

ok derradt@