If we assume that proc-xen.mount always loads xenfs.ko, var-lib-xenstored.mount always requires just tmpfs and xenstored.socket has no driver dependencies then xen-dom0-modules.service could run "Before=xenstored.service xen-watchdog.service" because every other .service file "Requires=xenstored.service"