: Development notes for the Yocto Project "Wrynose" release indicate updates to how

setting for service units to improve unprivileged container and service isolation.

Given the lack of context, here's a speculative interpretation: