Replace 'su' cruft with systemd's 'User='

See systemd.exec(5)