I know `systemctl enable iptables` is similar to the command `chkconfig --level 5 iptables on`, but both are not exactly same. 

Using `systemctl`, how do we restrict a service to be started only on a given target like graphical.target.