[Socket]
ListenStream=/tmp/.central-key-manager-api-encryption.sock
SocketMode=0777
SmackLabelIPIn=*
SmackLabelIPOut=@
Service=central-key-manager.service

[Install]
WantedBy=sockets.target