<listitem><para>Restricts the set of socket address families accessible to the processes of this
unit. Takes <literal>none</literal>, or a space-separated list of address family names to
allow-list, such as <constant>AF_UNIX</constant>, <constant>AF_INET</constant> or
- <constant>AF_INET6</constant>. When <literal>none</literal> is specified, then all address
+ <constant>AF_INET6</constant>, see
+ <citerefentry project='man-pages'><refentrytitle>address_families</refentrytitle><manvolnum>7</manvolnum></citerefentry>
+ for all possible options. When <literal>none</literal> is specified, then all address
families will be denied. When prefixed with <literal>~</literal> the listed address
families will be applied as deny list, otherwise as allow list. Note that this restricts access
to the