A local source checkout (the shared gac-bernina one) is owned by another account, which git refuses as dubious ownership: allow exactly that directory per command and clone with --no-local. The units now wait for the launcher on /sf before exec'ing it and never stop retrying - at boot /sf can still be missing, which is how the status server's user unit on saresb-cons-04 failed with 203/EXEC and gave up.