In that specific case, it was our own installation of a VPN client and a custom definition of its launchd configuration. I don’t remember the exact details anymore.

I’d expect the system-provided services to be correctly configured by Apple in this regard.