check process rspamd with matching "rspamd: main"
start program = "/usr/sbin/rspamd" as uid "rspamd" and gid "rspamd"
stop program = "/usr/bin/killall rspamd"
