This problem actually has an easy and natural solution: add [Unit] DefaultDependencies=no
to openafs-client.service. My testing hasn't revealed any adverse side effects (but I don't claim to have good coverage of all the situations that can arise; this fix might conceivably turn out to be incomplete).
