t2fanrd
The systemd service is run as root but is significanty hardened. There is no default config file shipped.
sharpenedblade