> this will not take off I'm afraid, because locking these unitfiles down is offloaded to the end-user (I've yet to see maintainers embrace shipping locked down files).

https://fedoraproject.org/wiki/Changes/SystemdSecurityHarden...