Some effort has been put into adding systemd hardening per unit basis. Every app is run by a special user created to do just that. This app user only has permi

Some effort has been put into adding systemd hardening per unit basis. Every app is run by a special user created to do just that. This app user only has permissions for the app and data folder. (I don’t have much security/hardening experience)