CentOS7: systemd-systemctl and grsec lock