diff --git a/units/systemd-nspawn@.service.in b/units/systemd-nspawn@.service.in
index 83761e7e8bc..d7bae83ac2e 100644
--- a/units/systemd-nspawn@.service.in
+++ b/units/systemd-nspawn@.service.in
@@ -28,9 +28,9 @@ Delegate=yes
 TasksMax=16384
 {{SERVICE_WATCHDOG}}
 
-# Enforce a strict device policy, similar to the one nspawn configures when it
-# allocates its own scope unit. Make sure to keep these policies in sync if you
-# change them!
+{# Enforce a strict device policy, similar to the one nspawn configures when it
+ # allocates its own scope unit. Make sure to keep these policies in sync if you
+ # change them! #}
 DevicePolicy=closed
 DeviceAllow=/dev/net/tun rwm
 DeviceAllow=char-pts rw