Comment # 2 on bug 1194470 from Matthias Gerstner

The new approach is to call a ExecStartPre script as the unprivileged user.
This script will create the state directory in a safe-ish way. The sticky bit
directory is shaky for this purpose but I don't see a simple way around that.