Comment 8 for bug 1851056

That's interesting. With secure boot and lockdown in place there is no bpf, and without bpf systemd services' acls dont work. Not critical but essentially totally broken :D