[Unit]
Description=Custodian daily security decision sync and flow report

[Service]
Type=oneshot
WorkingDirectory=%h/the-custodian
ExecStart=/usr/bin/python3 %h/the-custodian/scripts/security_flow_daily.py --apply
NoNewPrivileges=yes
UMask=0077