Change in osmo-hlr[master]: systemd: enable basic hardening