Bring in optional runas user for enabling plugins

Change-Id: I4410b73b497ff35fd5afc309a5372f152cdd4f9d
diff --git a/README.rst b/README.rst
index 16f89e8..bab7652 100644
--- a/README.rst
+++ b/README.rst
@@ -49,6 +49,7 @@
             enabled: true
             user: 'monitor'
             password: 'password'
+        plugins_runas_user: rabbitmq
         plugins:
         - rabbitmq_stomp
 
diff --git a/rabbitmq/server/plugin.sls b/rabbitmq/server/plugin.sls
index 6b04cb2..7a7a1c3 100644
--- a/rabbitmq/server/plugin.sls
+++ b/rabbitmq/server/plugin.sls
@@ -9,9 +9,12 @@
 rabbitmq_plugin_{{ plugin }}:
   rabbitmq_plugin.enabled:
   - name: {{ plugin }}
+  {%- if server.plugins_runas_user is defined %}
+  - runas: {{ server.plugins_runas_user }}
+  {%- endif %}
   - require:
     - service: rabbitmq_service
 
 {%- endfor %}
 
-{%- endif %}
\ No newline at end of file
+{%- endif %}
diff --git a/tests/pillar/rabbitmq_server.sls b/tests/pillar/rabbitmq_server.sls
index b955196..98bf4b3 100644
--- a/tests/pillar/rabbitmq_server.sls
+++ b/tests/pillar/rabbitmq_server.sls
@@ -20,6 +20,7 @@
           definition: '{"ha-mode": "all"}'
     memory:
       vm_high_watermark: 0.4
+    plugins_runas_user: root
     plugins:
     - amqp_client
     - rabbitmq_management