Well, for starters we could replace the path based unit with one that does --from-configdrive=/media/configdrive and named something like cloudinit-configdrive.service. Also setup Before/After so configdrive always runs after the oem. Then the oem can replace the unit to enable convert-netconf=debian