[Socket] ListenStream=/tmp/.central-key-manager-api-control.sock SocketMode=0777 SmackLabelIPIn=* SmackLabelIPOut=@ Service=central-key-manager.service [Install] WantedBy=sockets.target