[Service]
CapabilityBoundingSet=CAP_SETPCAP