nds service should be socket activated
The 'nds' service, which uses a socket to receive and respond to commands, should be socket activated, so that it's only instantiated when needed, without needing explicit enabling by the admin. This is simple to setup with systemd, but it will likely require changes to the nds server itself to accept the socket from the controlling process.