[arch-general] Isolate systemd target if service fails