Add some negative tests
Use service_restart in IKEEXT and ServicePermissions

Service_restart is aggressive so should attempt to leave as Auto
Fixes after testing
Some post testing fixes

Also deprecate net escalate as it is covered by service_permissions
as a generic exploit