Managing POSIX Capabilities via Systemd

Assign system-level capabilities to service units to limit their impact during runtime.