Keep runit customizations in the `service` LWRP only