systemd: add SMACK support option.