Harden systemd service
Summary
Rebased !30 (closed) with resolved conflicts and additions suggested by OP
Detailed description and/or reproducer
Addition of systemd unit sandboxing in order to increase security and pass 'systemd-analyze security' tests.