diff --git a/examples/chrony-wait.service b/examples/chrony-wait.service
index f629ad9..0f5e2e7 100644
--- a/examples/chrony-wait.service
+++ b/examples/chrony-wait.service
@@ -1,5 +1,6 @@
 [Unit]
 Description=Wait for chrony to synchronize system clock
+Documentation=man:chronyc(1)
 After=chronyd.service
 Requires=chronyd.service
 Before=time-sync.target
diff --git a/examples/chronyd.service b/examples/chronyd.service
index 927a478..4ffe3b1 100644
--- a/examples/chronyd.service
+++ b/examples/chronyd.service
@@ -10,6 +10,9 @@ Type=forking
 PIDFile=/var/run/chronyd.pid
 EnvironmentFile=-/etc/sysconfig/chronyd
 ExecStart=/usr/sbin/chronyd $OPTIONS
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=full
 
 [Install]
 WantedBy=multi-user.target