Systemd servide should not restart on failure

This should not be done by default but used by adminsys with a drop-in.d file,
for buggy daemons which crash without known fixes.