examples/unsubscribe-milter@.service: use KillMode=process
    
    This can be a multi-process daemon, but systemd should only kill
    the top-level one.  And also finish a comment about the User
    having access to the shared private key.