With on-failure, if you turn it off with the FN-key, does it automatically turn back on?
Interesting. Can you post the contents of the script you run with that unit file? Also post the journal entries for the affected boot (the boot where you tested on-failure)