listen.owner & listen.group not taken into account
Solution 1:
Got it. The issue was listen.acl_users (emphasis mine):
When POSIX Access Control Lists are supported you can set them using these options, value is a comma separated list of user/group names. When set, listen.owner and listen.group are ignored.
Solution: comment out this line:
;listen.acl_users = apache,nginx