Make the systemd unit compatible with tomcat9

- Use ReadWritePaths by default, since it doesn't
  cause any harm
- Rephrase the ProtectSystem comment, to make it more clear
- Fix verbs in a comment

contrib/airsonic.service

@@ -35,16 +35,15 @@ RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 RestrictNamespaces=yes
 RestrictRealtime=yes
 SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap
-ProtectSystem=full
+ReadWritePaths=/var/airsonic
 
-# You can uncomment the following line if you don't want airsonic to be able to 
+# You can change the following line to `strict` instead of `full`
+# if you don't want airsonic to be able to
 # write anything on your filesystem outside of AIRSONIC_HOME.
-# Don't forget to remove the other `ProtectSystem` line above.
+ProtectSystem=full
-#ProtectSystem=strict
-#ReadWritePaths=/var/airsonic
 
 # You can uncomment the following line if you don't have any media
-# in /home/…. This will prevent airsonic from ever read/write anything there.
+# in /home/…. This will prevent airsonic from ever reading/writing anything there.
 #ProtectHome=true
 
 # You can uncomment the following line if you're not using the OpenJDK.