I am planning to. :) It's going slowly though.

Have a look at these in systemd.exec[1]: PrivateUsers, DynamicUser, ProtectProc, RootDirectory.

There are more, but these are the main ones.

[1]: https://www.freedesktop.org/software/systemd/man/systemd.exe...