Run commands through systemd-run
This (after some cleanup) implements the actual functionality of running programs. Don't know if systemd-run
is available on the target deployment host but it does come with a bunch of useful features - it's an instant-return program that handles all the log storage etc. for us, and it allows to lock down the process a bit.