Service arguments are not substituted in chain-to, presumably read_value_resolved() has to be used in https://github.com/davmac314/dinit/blob/master/src/includes/load-service.h#L2304 instead of read_setting_value(). IMO, substitution has to happen for pretty much all fields by default.