Wouldn't it make more sense to use [CapabilityBoundingSet=](https://www.freedesktop.org/software/systemd/man/systemd.exec.html#CapabilityBoundingSet=) instead and keep it running as guam user?
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search