tor fails to start with ControlSocket enabled (CapabilityBoundingSet)

Tor will fail to start with the provided systemd service file due to missing capabilities.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information