I think you're right, my best guess at why this is needed is to ensure it's present before the service starts.  Linking it to the vhost makes more sense, unless I'm missing a reason.