[Unit]
Description=dnssec-triggerd Control Key And Certificate Generator
After=syslog.target 
ConditionPathExists=!/etc/dnssec-trigger/dnssec_trigger_control.key

[Service]
Type=oneshot
ExecStart=/usr/sbin/dnssec-trigger-control-setup -d /etc/dnssec-trigger/
ExecStart=/sbin/restorecon /etc/dnssec-trigger/*

[Install]
WantedBy=multi-user.target