Hi

On Mon, Dec 12, 2016 at 4:03 PM Lennart Poettering 
> Hmm, yeah, I should probably blog more about all the nice sandboxing
features we have now in systemd. 
 
It would be useful if we can set these type of options as system wide - for both the distribution/vendor and for admin overrides with services that can opt out rather than opt-in

Rahul