I want the process list of a systemd unit - just like systemctl status $unitname does - but in machine-readable output, to look for specific processes.

systemctl show --no-page iptables \ | jq --slurp --raw-input \ 'split("\n") | map(select(. != "") | split("=") | {"key": .[0], "value": (.[1:] | join("="))}) | from_entries'