{ scope, ... }:
scope "systemd" {
  services."user@".serviceConfig.Delegate = "memory pids cpu cpuset";
  user.extraConfig = "LogLevel=debug";
}