add dependency on the stunnel service so refresh_stunnel is not run until the service has been started