Turns out it is more trouble than it is worth trying to make this work:
with the secure socket problem etc...
The first start up is fast enough for me in the end.
This reverts commit cc21d84808.
The service definition is pretty awful, but it deals with the secure
socket correctly...
This avoids having a small lapse when starting the very first shell of a
session, which must first launch the server.