The Undertow subsystem installs most of its services using ServiceController.Mode.ACTIVE.
AFAICT, most (if not all) of these can be installed either ON_DEMAND or PASSIVE mode - where on-demand services ought to be started either because:

1. they are required by a deployment
2. they are required by another subsystem