systemd: lock for entire GetUnitStates call