Add procprotect as a systemctl service