enforced in bindService() override