[Service]
CapabilityBoundingSet=CAP_MAC_OVERRIDE