systemd has a lot of useful features to restrict and limit services which it executes under it’s control domain. To know about these possibilities can be very useful to provide a restricted safer environment for your services.
Daniel Aleksandersen Control-Blog provides an overview about these possibilities