* add ipv6 localhost to trusted proxies by default * test different trusted proxies
AmbientCapabilities=CAP_NET_BIND_SERVICE