[Service]
ImportCredential=
PrivateTmp=no
BindReadOnlyPaths=
ProcSubset=all
ProtectProc=default
ProtectControlGroups=no
ProtectKernelTunables=no
NoNewPrivileges=no
ProtectSystem=no
ProtectHome=no
PrivateDevices=no
ReadWritePaths=
ProtectKernelLogs=no
ProtectKernelModules=no
PrivateMounts=no
