The unnecessary dependency of sockets.target on kresd.service causes a dependency cycle preventing kresd.service from starting at boot: sockets.target -> kresd.service -> basic.target -> sockets.target