SystemD Service Hardening - https://news.ycombinator.com/item?id=44937550