allow-debuggers
allusers
apparmor
apparmor-replace
apparmor-stack
caps
deterministic-exit-code
deterministic-shutdown
disable-mnt
ipc-namespace
keep-config-pulse
keep-dev-shm
keep-shell-rc
keep-var-tmp
landlock.enforce
machine-id
memory-deny-write-execute
netfilter
netlock
no3d
noautopulse
nodbus
nodvd
nogroups
noinput
nonewprivs
noprinters
noroot
nosound
notv
nou2f
novideo
overlay
overlay-tmpfs
private
private-cache
private-cwd
private-dev
private-etc
private-lib
private-tmp
quiet
restrict-namespaces
seccomp
seccomp.block-secondary
tab
tracelog
writable-etc
writable-run-user
writable-var
writable-var-log
x11