# /etc/systemd/system/loading-program.service
[Unit]
Description=Create home directories for lab-committee members
RequiresMountsFor=/mnt/stockroom
Wants=network-online.target
After=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/loading-program
CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER
NoNewPrivileges=yes
ProtectSystem=strict
ReadWritePaths=/mnt/stockroom/homes
PrivateTmp=yes