You are deploying a custom monitoring daemon that must run under its own dedicated service account named 'monsvc'. Security policy requires this account to have no interactive login capability, no home directory, and a UID within the system account range. Which command best satisfies these requirements?