[Service]
ProcSubset=all
ProtectProc=default
ProtectControlGroups=no
ProtectKernelTunables=no
NoNewPrivileges=no
LoadCredential=

ProtectSystem=no
ProtectHome=no
PrivateDevices=no
PrivateTmp=no
ReadWritePaths=
ProtectKernelLogs=no
ProtectKernelModules=no
PrivateMounts=no
