core: make sure we properly parse ProtectHome= and ProtectSystem=