Add Smack label option in systemd service file

No match.