Systemd's service options are quite lax by default, and so it is often desirable to look at ways to harden systemd services.