Security Sandboxing for Scheduled Tasks

Use systemd dynamic user and private namespace features for security-hardened jobs.