I had the attached wrapper and it worked, but it feels wrong to solve it that way.
Instead (plan) I'm gonna implement in C instead.
I think it will be after getopt checking cap_sys_time and imply -x if not available.
I plan to suggest so upstream, if accepted I'll apply.
Otherwise for now we might wrap it in a if to an environment variable that the .service file will set.
I had the attached wrapper and it worked, but it feels wrong to solve it that way.
Instead (plan) I'm gonna implement in C instead.
I think it will be after getopt checking cap_sys_time and imply -x if not available.
I plan to suggest so upstream, if accepted I'll apply.
Otherwise for now we might wrap it in a if to an environment variable that the .service file will set.