pub fn classify_systemd_unit(unit_name: &str, exec_start: &str) -> bool
Classify whether a systemd unit is suspicious.
Returns false for known-safe unit names and safe ExecStart prefixes.
false
ExecStart