we have not fully explored this possibility, because we accidentally stumbled upon CVE-2021-33910 in systemd
