[Service] PrivateDevices=false ProtectHome=false ProtectSystem=false LimitNOFILE= LimitNPROC= WorkingDirectory=/srv/vaultwarden ReadWriteDirectories= ReadWriteDirectories=