dnscrypt-proxy service: additional hardening

Run the daemon with private /home and /run/user to
prevent it from enumerating users on the system.

nixos/modules/services/networking/dnscrypt-proxy.nix

···
 
         PrivateTmp = true;
         PrivateDevices = true;
+        ProtectHome = true;
       };
     };
   };