service: allow KillMode=mixed in conjunction with PAMName=