[Service]
ProtectKernelModules=no
RestrictRealtime=no