[COOK-4708] Fix default recipe order

Generating a bad sshd_config could prevent sshd from ever being
started because the service block appeared before the template block.