You need to limit what a service can access. You should change the service’s: