Service whitelist

This introduces a service whitelist feature. By default, all services are allowed.
The service whitelist supports regex as well as non-regex rules. Documentation will follow in the GitHub wiki.