#1 configurable guards per service or task