user unit: remove ProtectSystem=
In a user unit ProtectSystem= cannot work without PrivateUsers=yes, as mounts can only be done in a user namespace when not running as root. In the future this will be implicit, so remove it to avoid unintended sandboxing from being enabled.