All-clear, nothing was wrong: * systemd runs in pid 1 * to start a service systemd fork()'s * child has same SELinux label but different pid * systemd internally replaces the program name of the child, so the proctitle is no longer 'systemd' but '(#name of service to start#)', with these brackets * after creating the environment, the child exec's into the service daemon, thereby keeping the pid but changing the SELinux label and the proctitle (brackets disappear)
