The keyd socket was previously moved under /run/onak so that
subdirectory could be owned by the onak user. However the systemd
ExecStartPre commands run as the onak user, so the creation + ownership
setup was not properly happening. Prefix with a +, which tells systemd
these commands ignore the User= setting.
[Service]
User=onak
-ExecStartPre=/bin/mkdir -m 0755 /run/onak
-ExecStartPre=/bin/chown onak /run/onak
+ExecStartPre=+/bin/mkdir -p -m 0755 /run/onak
+ExecStartPre=+/bin/chown onak /run/onak
ExecStart=/usr/sbin/keyd -f
ExecStop=/usr/bin/keydctl quit