[Bug 1216373] VUL-0: shadowsocks-rust: systemd services run unnecessarily as root with full privileges