Now that FileDescriptorName= is properly honored by Accept=yes sockets,
this explicit override is pointless.
Before=shutdown.target
[Service]
-Environment=LISTEN_FDNAMES=varlink
ExecStart=bootctl
Before=shutdown.target initrd-switch-root.target
[Service]
-Environment=LISTEN_FDNAMES=varlink
ExecStart=-systemd-creds
Before=shutdown.target initrd-switch-root.target
[Service]
-Environment=LISTEN_FDNAMES=varlink
ExecStart=-{{LIBEXECDIR}}/systemd-pcrextend
After=systemd-remount-fs.service var.mount
[Service]
-Environment=LISTEN_FDNAMES=varlink
ExecStart={{LIBEXECDIR}}/systemd-pcrlock --location=770
Before=shutdown.target initrd-switch-root.target
[Service]
-Environment=LISTEN_FDNAMES=varlink
ExecStart=-systemd-sysext