If not daemonized, use sd_notify to send READY=1 after startup.

Without it, race is happening between ssh-blocker and iptablesrc.