[Unit] Description=Pesign signing daemon [Service] PrivateTmp=true PIDFile=/run//pesign.pid ExecStart=/usr/bin/pesign --daemonize --nofork ExecStartPost=/usr/libexec//pesign/pesign-authorize [Install] WantedBy=multi-user.target