I think for Roundcube and most other services the startup hook is early enough. Of course, the logon phase is a separate problem, as we need an authenticated user to get the config from cockpit.