8.0 packaging debian sign aab

Same question about scriptlet things, google tells me we can `BuildRequires: systemd-units` and get access to `%{_unitdir}` which might be where service files are supposed to go (that's really uncertain, the documentation overseers are all but clear and some packages use `%{buildroot}%{_unitdir}`)?