systemd service restart on failure vs always