systemd will refuse to run a transient unit if one run with the same unit name failed earlier
This ensures it can start and stop the box process. Due to control-group setting to killall children the updater itself would get killed if the box service restarts