[Unit]
Description=ANSIPA signed policy pull-and-apply
Wants=network-online.target
After=network-online.target

[Service]
Type=oneshot
User=_ansipa
ExecStart=/usr/local/bin/ansipa-pull-apply.sh
StandardOutput=journal
StandardError=journal