update step-ca role

templates/step-ca.service.j2

@@ -30,19 +30,13 @@ SecureBits=keep-caps
 NoNewPrivileges=yes
 
 ; Sandboxing
-ProtectSystem=full
-ProtectHome=true
-RestrictNamespaces=true
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 PrivateTmp=true
 PrivateDevices=true
-ProtectClock=true
 ProtectControlGroups=true
 ProtectKernelTunables=true
-ProtectKernelLogs=true
 ProtectKernelModules=true
 LockPersonality=true
-RestrictSUIDSGID=true
 RemoveIPC=true
 RestrictRealtime=true
 SystemCallFilter=@system-service