What's the best practice for defining a service that might require network credentials to run? Are there example unit files that do this? How does one set up the dependencies to access an LDAP or Active Directory server, for example?