{
  defaultHardening = {
      PrivateTmp = "true";
      ProtectSystem = "full";
      NoNewPrivileges = "true";
      PrivateDevices = "true";
      MemoryDenyWriteExecute = "true";
  };
}