units: turn off keyring handling for user@.service

This service uses PAM anyway, hence let pam_keyring set things up for
us. Moreover, this way we ensure that the invocation ID is not set for
this service as key, and thus can't confuse the user service's
invocation ID.

Fixes: #11649

diff --git a/units/user@.service.in b/units/user@.service.in
index ca98c05..e898b39 100644 (file)
--- a/units/user@.service.in
+++ b/units/user@.service.in
@@ -24,3 +24,4 @@ KillMode=mixed
 Delegate=pids memory
 TasksMax=infinity
 TimeoutStopSec=120s
+KeyringMode=inherit