In https://bugzilla.redhat.com/show_bug.cgi?id=1827712 some OpenShift CI is seeing `/boot` being unmounted before `ostree-finalize-staged.service` runs or completes. We finally tracked this down to a bug elsewhere, but I think we should add this because it clearly shows our requirements.