certPath
Improves service encapsulation.
'isSystemUser' has to be explicitly set in NixOS 21.05. Previously, it was the implicit default.