dnsmasq in the net zone drops to nobody once its sockets are bound, and reads its servers' file itself when it changes - #257