policy-rc.d: always prevent services from acting