add dependency on the stunnel service so refresh_stunnel is not run until the service...