anchor.diff:          Type = "oneshot";
           WorkingDirectory = cfg.package;
           # System Call Filtering
  -        SystemCallFilter = "~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ]);
  +        SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" ];
         } // cfgService;
   
         after = [ "network.target" ];
  
positive.code:         RuntimeDirectory = "mastodon-streaming";
          RuntimeDirectoryMode = "0750";
          # System Call Filtering
          SystemCallFilter = "~" + lib.concatStringsSep " " (systemCallsList ++ [ "@privileged" "@resources" ]);
        } // cfgService;
      };
  
  
negative.code:         RuntimeDirectory = "mastodon-web";
          RuntimeDirectoryMode = "0750";
          # System Call Filtering
          SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" ];
        } // cfgService;
        path = with pkgs; [ file imagemagick ffmpeg ];
      };
  