watchdog is broken
When watchdog isn't enabled (explicitly, and True doesn't suffice), the service will restart every 10s. That's because the generated unit contains watchdog spec (regardless of config), but generated config explicitly unloads the module that would send the keep-alives.