add dependency on the stunnel service so refresh_stunnel is not run until the service has been started (#6495)

Change-Id: Id48fedb5731117b68b7386c4ce22516333d94081