Update services, user, group and dir access

- Split off services into separate ones to allow more fine grained
  control for e.g. capabilities.
- Add new kea user and group under which these services will run.
- Tighten access to state and log directories

kea.spec

@@ -398,33 +398,21 @@ find "%{buildroot}/%{_libdir}" -name "*.so.*" -type l -delete
 rm -Rf "%{buildroot}/%{python3_sitelib}/kea/__pycache__"
 
 %pre -f kea.pre
-%service_add_pre kea-dhcp4.service
-%service_add_pre kea-dhcp6.service
-%service_add_pre kea-dhcp-ddns.service
-%service_add_pre kea-ctrl-agent.service
+%service_add_pre kea-dhcp4.service kea-dhcp6.service kea-dhcp-ddns.service kea-ctrl-agent.service
 
 %post
 %tmpfiles_create %{_tmpfilesdir}/%{name}-tmpfiles.conf
-%service_add_post kea-dhcp4.service
-%service_add_post kea-dhcp6.service
-%service_add_post kea-dhcp-ddns.service
-%service_add_post kea-ctrl-agent.service
+%service_add_post kea-dhcp4.service kea-dhcp6.service kea-dhcp-ddns.service kea-ctrl-agent.service
 if [ $1 -gt 1 ]; then
     chown -R kea:kea %{_sharedstatedir}/kea
     chown -R kea:kea %{_localstatedir}/log/kea
 fi
 
 %preun
-%service_del_preun kea-dhcp4.service
-%service_del_preun kea-dhcp6.service
-%service_del_preun kea-dhcp-ddns.service
-%service_del_preun kea-ctrl-agent.service
+%service_del_preun kea-dhcp4.service kea-dhcp6.service kea-dhcp-ddns.service kea-ctrl-agent.service
 
 %postun
-%service_del_postun kea-dhcp4.service
-%service_del_postun kea-dhcp6.service
-%service_del_postun kea-dhcp-ddns.service
-%service_del_postun kea-ctrl-agent.service
+%service_del_postun kea-dhcp4.service kea-dhcp6.service kea-dhcp-ddns.service kea-ctrl-agent.service
 
 %ldconfig_scriptlets -n libkea-asiodns%asiodns_sover
 %ldconfig_scriptlets -n libkea-asiolink%asiolink_sover