Comment 5 for bug 2038942

#4 Enablement of isolation/hardening features should be considered (e.g. as part of the systemd service)
#6 Consider putting a condition into the systemd service, to make it run only when relevant hardware is detected

Addressed in a very strict manner in https://launchpad.net/ubuntu/+source/qrtr/1.0-2ubuntu1 and https://launchpad.net/ubuntu/+source/protection-domain-mapper/1.0-4ubuntu2