don't explicitly depend on docker.service, make it implicit with ExecStartPre