This should also fix the ACME certificate self-signed permissions error since there is no `wezterm` group (or user). We're just using systemd's dynamic user feature in our service.
Not yet fully configured though so we'll have to update the Wezterm server configuration.
