check process rspamd with matching "rspamd: main"
  start program = "/usr/sbin/rspamd" as uid "rspamd" and gid "rspamd"
  stop program = "/usr/bin/killall rspamd"