- use utils.escapeSystemdExecArgs in systemd service - remove StandardError="journal" as it's already default