Hardening

Stub — content coming soon.

systemd sandboxing and file permissions.