systemd: Enable ProtectHome and ProtectSystem options

These options protect from unintended access to the filesystem see
SYSTEMD.EXEC(5) for mode detail.
1 file changed