timedated: make sure GetAll() succeeds in systems lacking /dev/rtc (such as containers)
service: actually leave watchdog enabled in the states where it matters