When running under systemd the $HOME variable isn't set, because of that the cloudtrail fileset can't find the aws credentials file.