{ ... }:

let
  # Common hardening flags
  commonFlags = { NoNewPrivileges = true; PrivateTmp = true; ProtectSystem = true; ProtectHome = true; }
in {
  # I am overwriting a option here
  systemd.services.rtorrent.serviceConfig = commonFlags // { ProtectHome = "read-only"; };
}