Turns out it is more trouble than it is worth trying to make this work:
with the secure socket problem etc...
The first start up is fast enough for me in the end.
This reverts commit cc21d84808dfd79736b3c44e72ea2c3a8e1476a6.
The service definition is pretty awful, but it deals with the secure
socket correctly...
This avoids having a small lapse when starting the very first shell of a
session, which must first launch the server.