···3535 // Using service unit (not scope) to get access to network/filesystem isolation
3636 systemdArgs := []string{
3737 "--wait", // Wait for service to complete
3838+ "--pipe", // Pipe stdout/stderr to capture output
3839 "--unit=" + name, // Give it a descriptive name
3940 "--quiet", // Suppress systemd output
4041 "--collect", // Automatically clean up after exit