core: imply NNP and SUID/SGID restriction for DynamicUser=yes service
    
    Let's be safe, rather than sorry. This way DynamicUser=yes services can
    neither take benefit of, nor create SUID/SGID binaries.
    
    Given that DynamicUser= is a recent addition only we should be able to
    get away with turning this on, even though this is strictly speaking a
    binary compatibility breakage.
    
    (cherry picked from commit bf65b7e0c9fc215897b676ab9a7c9d1c688143ba)
    Resolves: #1687512
    
    patch_name: 0329-core-imply-NNP-and-SUID-SGID-restriction-for-Dynamic.patch
    present_in_specfile: true
    location_in_specfile: 329
    squash_commits: true