Harden service file, also fix service not starting (because of CLI update).