[Unit] Description=rollcall: renew the delegated intermediate CA %i daily [Timer] OnBootSec=15min OnUnitActiveSec=1d RandomizedDelaySec=1h Persistent=true [Install] WantedBy=timers.target