> instead of `cargo build` you'll need to use `filectl exec -u cargo build`

You joke, but I already have to do this with lxc commands, and the systemd-compatible version of those commands is even longer than you imagined. See my other comment for details.