Files in /var/run/qubes-service are created by qubes-sysinit.service. So defer that condition check after that service start. Thanks @adrelanos for the report. Fixes QubesOS/qubes-issues#1985
Private data inside /var/lib/tor should not be shared. Tor should not be run inside TemplateVMs. https://github.com/QubesOS/qubes-issues/issues/1625#issuecomment-172369781