marking this as invalid for systemd as arbitrary code can be run using networkd-dispatcher and/or suggestions from comment 4.
marking this as invalid for systemd as arbitrary code can be run using networkd-dispatcher and/or suggestions from comment 4.