What user should be specified for the opendikm -u UID option?

[Tom Browder]

The docs mention not to use root or postfix for the "-u UID" option. Then
what user should it be? Is a new user to be created for that purpose?
Should that same user own the /var/db/dkim directory and files?

Thanks.

-Tom