[Service]
ReadWritePaths=/srv/niver/tor-keys
# To allow reloading service on Arch Linux
CapabilityBoundingSet=CAP_KILL