systemd: use PrivateUsers= in user unit

PrivateTmp= and other sandboxing options require a user namespace in order to work as user units (the user manager does not run as root and thus without a user namespace it is unable to perform mounts).