\x89\x50\x4E\x47\x0D\x0A\x1A\x0A
 PNG

\x89\x50\x4E\x47\x0D\x0A\x1A\x0A
# The "trusted" profile for services, i.e. no restrictions are applied

[Service]
MountAPIVFS=yes
BindPaths=/run
BindReadOnlyPaths=/etc/machine-id
BindReadOnlyPaths=/etc/resolv.conf