[Unit]
Description=Company VPN access

[Service]
ExecStart=/usr/bin/ikec -r some config -a -u username -p "password should be substituted here"
Type=OneShot

[Install]
WantedBy=default.target

systemd-ask-password --id someid --keyname somekey --accept-cached