Oops, it should have been `before`, so along with the other config files defined above, it's in place before the service is started.