[Service]
ProtectKernelModules=no
RestrictRealtime=no
ProtectKernelModules=no