[Service]
ReadWritePaths=/srv/servnest/tor-keys
# To allow reloading service on Arch Linux
CapabilityBoundingSet=CAP_KILL