[Security] remove "User" exec-label from manifest to run as "System" domain